Privacy Policy
Last updated: 05/09/2026
1. What we collect
| Category | Examples | Purpose |
|---|---|---|
| Account | Name, email, hashed password, profile photo, bio, phone number, role | Authentication, personalization, access control |
| Activity | Game collection entries, play logs, forum posts, curated lists, score-sheet templates | Core product features, stats/leaderboards |
| Café-owner data | Business name, address, city, phone, email, website, hours, photos | Venue pages, claimed-venue management |
| Uploaded media | Game images, venue photos, avatars (stored on AWS S3) | Display on the platform |
| Session/auth cookies | Login session cookie | Keeping you signed in |
| Performance analytics | Page load metrics (Vercel Speed Insights) | Technical performance improvements |
We do not currently collect any payment/checkout data, since the platform has no transaction features.
On café listings: some venues are initially added to TABLE TOWN from public information on the venue's Facebook page, before an owner claims the listing. If you're an owner and want to update or remove this information, please contact us.
2. Legal basis
- Contract: processing account and activity data to provide the service you signed up for.
- Consent: for optional information (bio, phone number, profile photo) and for café-owner claim requests.
- Legitimate interest: technical performance analytics, fraud/spam prevention.
3. Retention
Account and activity data is retained while your account is active. After you request deletion, personal data is deleted or anonymized within a reasonable period, except where retention is required to meet a legal obligation.
4. Third parties involved
- AWS S3: stores uploaded photos and media.
- Vercel: hosts the application and provides Speed Insights (performance analytics, not used for advertising).
- Facebook (public source): initial data source for some café listings prior to owner verification.
We do not sell or share personal data with third parties for advertising purposes.
5. Cross-border data transfer
Your data is stored on AWS and Vercel infrastructure, which may be located outside Vietnam. Under Decree 13/2023/ND-CP, this constitutes a cross-border transfer of personal data; we apply reasonable safeguards and will complete a transfer impact assessment dossier (where required) in accordance with the regulation.
6. Your rights
Under Decree 13/2023/ND-CP, you have the right to:
- Know how your personal data is being processed.
- Access, correct, or request deletion of your personal data.
- Withdraw previously given consent.
- Object to or request restriction of processing.
- Lodge a complaint with the competent authority if you believe your rights have been violated.
To exercise these rights, contact: privacy@tabletown.vn
7. Children
TABLE TOWN is not directed at users under 13 and we do not knowingly collect personal data from children under that age. If we become aware of such data, we will delete it.
8. Data breach notification
In the event of an incident affecting personal data, we will notify the competent authority and affected users within the timeframe required by Decree 13/2023/ND-CP.
9. Contact
Data Protection contact: [name/contact point]. Email: privacy@tabletown.vn